Skip to content

chore(deps): bump bundled agents to latest#901

Open
dohooo wants to merge 1 commit into
mainfrom
automation/bump-bundled-vendors
Open

chore(deps): bump bundled agents to latest#901
dohooo wants to merge 1 commit into
mainfrom
automation/bump-bundled-vendors

Conversation

@dohooo

@dohooo dohooo commented Jun 25, 2026

Copy link
Copy Markdown
Owner

Automated daily refresh of Helmor's bundled coding agents to their latest stable upstream versions. This is the long-lived vendor-bump PR — new bumps are rebased onto origin/main and stacked here.

Vendor versions

Vendor Current Target Notes
@openai/codex 0.142.0 0.142.2 npm latest. Patch bump.
opencode-ai + @opencode-ai/sdk 1.17.10 1.17.11 npm latest. SDK + CLI in lockstep.
@anthropic-ai/claude-code 2.1.191 2.1.191 Already latest.
@anthropic-ai/claude-agent-sdk 0.3.191 0.3.191 Already latest (lockstep with claude-code, claudeCodeVersion: 2.1.191 ✓).
@cursor/sdk 1.0.21 1.0.21 Already latest.
Kimi 0.19.2 0.19.2 Already latest GitHub release.

Changes

  • sidecar/package.json — pins for codex + opencode (sdk & cli).
  • sidecar/scripts/vendor-platform.ts — added CODEX_SHA256["0.142.2"] and OPENCODE_SHA256["1.17.11"], each with arm64 + x64 tarball SHA256 (computed from the npm darwin tarballs).
  • .changeset/bump-bundled-agents.md — the single rolling changeset (helmor: patch), updated in place to add Codex.

Breaking-change assessment

No breaking changes detected. Both are patch bumps:

  • Codex 0.142.0 → 0.142.2: layout descriptor unchanged (layoutVersion: 1), so no stage-vendor.ts changes needed. No stdout event-shape (item/,turn/,thread/) changes observed.
  • OpenCode 1.17.10 → 1.17.11: typecheck passes (no SDK export/type breaks); message.part event shapes unchanged.

Verification gates (all green)

Gate Result
bun install ✅ resolved 0.142.2 / 1.17.11
bun run typecheck ✅ exit 0
bun test ✅ 406 pass, 1 skip, 0 fail
cargo test --test pipeline_scenarios --test pipeline_fixtures --test pipeline_streams ✅ all pass

The heavy bun run build (full staging + SHA256 verification + compile) was not run locally since stage-vendor.ts was untouched and SHAs were computed directly from the source tarballs — CI re-runs it on this PR.

🤖 Automated by the daily bundled-vendor bump routine.

https://claude.ai/code/session_019GUndt3D3i6mKy6d6HGSNQ


Generated by Claude Code

Bump bundled Codex (0.142.0 -> 0.142.2) and OpenCode (1.17.10 -> 1.17.11,
SDK + CLI in lockstep). Claude Code, Cursor SDK, and Kimi are already at
their latest stable versions.

- Update pins in sidecar/package.json and SHA256 tables in
  sidecar/scripts/vendor-platform.ts (arm64 + x64).
- Codex layout descriptor still layoutVersion 1 — no stage-vendor changes.

Gates: bun install, typecheck, bun test (406 pass), and the Rust pipeline
suites (pipeline_scenarios/fixtures/streams) all pass.

Claude-Session: https://claude.ai/code/session_019GUndt3D3i6mKy6d6HGSNQ
@dosubot dosubot Bot added the size:S This PR changes 10-29 lines, ignoring generated files. label Jun 25, 2026
@vercel

vercel Bot commented Jun 25, 2026

Copy link
Copy Markdown

The latest updates on your projects. Learn more about Vercel for GitHub.

1 Skipped Deployment
Project Deployment Actions Updated (UTC)
helmor-marketing Ignored Ignored Jun 25, 2026 1:12pm

Request Review

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

size:S This PR changes 10-29 lines, ignoring generated files.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants